Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft
File:                     F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft (raw, json)
Hash identifier:          JtqGqUT04O//aJZJirajf9RTrcub+3327cpBETTkmc0=
Subject key identifier:   06:23:82:FF:20:07:CC:E4:FA:1B:97:4C:60:EE:2C:C5:40:AE:33:0B
Authority key identifier: 17:92:58:2A:A0:B1:8D:60:73:59:2F:12:1A:6E:56:3F:EC:42:46:72
Certificate issuer:       /CN=1792582aa0b18d6073592f121a6e563fec424672
Certificate serial:       01962F74866B043E083122BEC4BA697FBE8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5JYKqCxjWBzWS8SGm5WP-xCRnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft
Manifest number:          0589
Signing time:             Sun 13 Apr 2025 14:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:27 +0000
Files and hashes:         1: F5JYKqCxjWBzWS8SGm5WP-xCRnI.crl (hash: U3IqLyYcKtal38x9EQzWxG7aZldbWWD8mHZfKpXo8+M=)
                          2: X1Hk6Afe1QrSetXg0Fl8YXsPzIQ.roa (hash: XOR8QJ4EQ0MnwLrp2DnXgyEFhnN9pPQ9poUD3LAPUHw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:86:6b:04:3e:08:31:22:be:c4:ba:69:7f:be:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1792582aa0b18d6073592f121a6e563fec424672
        Validity
            Not Before: Apr 13 14:01:27 2025 GMT
            Not After : Apr 14 14:01:27 2025 GMT
        Subject: CN=062382ff2007cce4fa1b974c60ee2cc540ae330b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:00:9b:e9:4f:ec:ad:6c:19:bc:1b:cb:7c:b0:
                    6d:99:0d:d8:cf:fc:bd:b9:2b:5b:37:8f:3e:30:70:
                    a6:47:ac:10:b4:db:86:be:77:df:af:70:71:bb:ed:
                    45:3b:89:e0:74:a1:47:c9:fc:de:59:a9:2e:9b:bf:
                    00:71:ec:fa:f4:03:ca:1a:83:78:ce:a8:15:7c:53:
                    9b:cd:6f:1b:db:50:01:e9:07:61:32:a0:57:f8:17:
                    6f:5d:7e:cd:eb:7a:52:36:4e:4a:5a:70:63:8b:90:
                    48:f0:90:e3:16:99:bd:88:20:d7:13:f3:9e:9c:82:
                    08:d9:d1:28:cc:f4:8a:35:ee:61:7e:4d:1a:75:aa:
                    77:a9:c4:e1:5f:22:f6:47:86:3e:b7:00:2a:68:f7:
                    c7:7f:34:57:58:b9:44:95:f2:a0:30:4b:d0:01:2e:
                    74:6b:71:82:dd:cd:e0:c1:d3:ea:7f:51:97:ec:8d:
                    b0:fe:dc:0b:c6:52:c6:6f:33:40:8a:a9:8c:0b:cd:
                    58:9d:6f:e6:01:4b:da:42:b1:5c:a6:c2:00:36:71:
                    f1:34:c8:dd:40:ac:d3:e8:e6:58:47:b5:b8:f5:37:
                    36:a8:40:f5:b3:d3:ec:fd:8d:a4:fd:73:8c:e5:b7:
                    a2:ce:c4:53:80:af:c4:75:f6:e2:28:09:0b:91:7b:
                    58:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:23:82:FF:20:07:CC:E4:FA:1B:97:4C:60:EE:2C:C5:40:AE:33:0B
            X509v3 Authority Key Identifier:
                keyid:17:92:58:2A:A0:B1:8D:60:73:59:2F:12:1A:6E:56:3F:EC:42:46:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5JYKqCxjWBzWS8SGm5WP-xCRnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:96:7f:a2:34:c8:f2:70:c0:00:d9:2c:27:82:fc:ed:d7:22:
         2a:55:7a:8c:4c:73:7a:15:c9:4e:cd:1f:40:5a:b2:13:67:9f:
         46:6b:a6:32:d3:f9:0e:8a:37:2f:3d:0d:7c:64:e1:2c:dc:53:
         14:59:64:4d:36:5f:d1:f6:24:7d:10:b0:00:36:16:08:93:77:
         b5:58:ea:b2:88:8a:b8:0a:ce:39:dc:58:59:dc:a5:fd:83:37:
         b3:12:7b:e1:33:6a:91:96:6d:09:c8:47:d2:f6:ac:60:88:b1:
         59:94:4e:a8:64:70:67:27:eb:81:85:6e:34:32:f5:4b:9a:4d:
         77:ae:fb:f9:eb:90:36:af:be:d1:51:61:3a:d6:bb:5e:46:10:
         29:a2:c8:b7:07:3f:2d:7a:38:f8:b7:72:e1:8f:05:50:6d:61:
         e4:0d:c8:d4:10:ab:87:60:10:36:10:a1:6d:60:c0:6f:0e:a0:
         8a:20:f0:25:31:2f:d0:d2:cd:85:55:e8:ee:9f:1d:22:0e:e6:
         55:52:1f:f1:f8:73:9b:86:b3:5c:94:04:1e:bd:a6:96:50:ce:
         c1:ff:7c:f6:c2:da:73:09:9f:a8:7b:0b:c3:90:ae:ed:03:3c:
         c4:98:89:90:7e:7f:54:3f:5e:03:49:4e:4f:38:50:cc:19:5d:
         e9:05:44:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----